Companies are facing the risk that they will be left alone to fend off cyber attacks.
Even as authorities warn of relentless cyber threats, a key tool companies use to safely share information with other businesses and the government is set to expire.
The Cybersecurity Information Sharing Act of 2015 shielded companies from lawsuits and liability if they were willing to share details about threats and vulnerabilities with each other and with federal agencies. That law and its immunity protection have encouraged industry to disclose threat intelligence for the last decade, but they’ll expire at the end of the month unless Congress takes action.
“I’m seeing fewer people around. The ones that are around aren’t participating as heavily as they were,” said Errol Weiss, chief security officer at Health-ISAC. Weiss said meetings with HHS and CISA personnel have gotten more rare in recent months.
